Vulnerability in Torrentflux
CVE-2006-6600
Cross-site scripting (XSS) vulnerability in dir.php in TorrentFlux 2.2, when allows remote attackers to inject arbitrary web script or HTML via double URL-encoded strings in the dir parameter, a related issue to CVE-2006-5609.
EPSS: 0.010 (60.0th percentile) — read the EPSS interpretation.
Affected products
- Torrentflux
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_CONFIRM, Exploit)
- cve@mitre.org (Patch, x_refsource_SECUNIA, third-party-advisory)